1. WHO WE ARE TayyebiSwims LLC teaches private swim lessons in and around Houston, Texas. An instructor comes to the pool you already use. This policy explains what we collect about you and your swimmer, why we collect it, and who else sees it. It covers app.tayyebiswims.com and the email we send you. It does not cover any other company's website, including the pool, gym or neighborhood association where your lessons happen. 2. WHAT WE COLLECT From you, when you register and while you are enrolled: • Your name, email address and phone number • Your billing address • The address where lessons happen, any access notes you give us (gate codes, where to park, which door to use), and the approximate map coordinates of that address, so we can assign the right instructor and pricing zone • Your emergency contacts — their names, phone numbers and relationship to the swimmer • The card brand, last four digits and expiry date of your payment method About each swimmer: • Name and date of birth • Allergies, medications, medical conditions, disabilities and any special needs you tell us about • Swim experience, comfort in water and skill level • Lesson history, attendance, progress notes and milestones Automatically, when you use the site: • Your IP address and browser user agent, recorded when you sign a policy document and kept with that signature, and again with each sign-in session • The date and time you signed each document, and the name you typed to sign it We ask for medical and disability information for one reason: an instructor standing in the water with your child needs to know about a seizure disorder, an allergy or a sensory need before the lesson starts, not after. If you would rather tell us something in person than type it into a form, call us. 3. WHERE IT COMES FROM Parents and guardians give us all of it. We do not collect information from children directly, and children do not have accounts on this site. A swimmer's information reaches us because an adult typed it in. 4. HOW WE USE IT • To schedule lessons and assign instructors • To let your instructor prepare for your swimmer safely • To bill you, take payment, and issue credits or refunds • To reach you about your lessons, your account and your payments • To keep a record of the policies you have agreed to • To run and secure the site, including limiting repeated sign-in attempts • To send you news about TayyebiSwims, only if you have not opted out 5. WHO WE SHARE IT WITH We use a small number of outside services to run the business. Each one gets only what it needs to do its job. • Stripe processes card payments. You enter your card details directly with Stripe. TayyebiSwims never receives or stores your full card number — we keep only the brand, last four digits and expiry date so you can tell your cards apart. • Resend delivers our email. It handles your email address and the contents of the messages we send you. • Google provides optional sign-in, described in section 6. • Neon hosts our database and Vercel hosts the site. Both store the information described above on our behalf. • Anthropic provides a writing tool that helps staff draft an announcement email. It receives a description of the audience, the number of inboxes the message will reach, and the instruction our staff typed. It does not receive family names, swimmer information, addresses, balances or lesson details, and it is not used to make any decision about you. We will also share information when the law requires it, when we must report a concern about a child's safety, or to establish or defend a legal claim. If you subscribe to your lesson calendar, that link contains a secret token, and anyone you forward it to can see your schedule. You can reset the link from your account page at any time. 6. GOOGLE SIGN-IN Signing in with Google is optional. You can always use an email address and password instead. If you choose it, we ask Google for three things and nothing else: your Google account identifier, your email address, and your basic profile information (the openid, email and profile scopes). We do not ask for and cannot see your Gmail, your Google Calendar, your contacts, your Drive files, or anything else in your Google account. We use that information only to confirm who you are and to connect you to your existing TayyebiSwims account. We store your Google account identifier and email address so that you can sign in again. We do not use it for advertising, we do not sell it, and we do not share it with anyone except the hosting providers named in section 5. You can disconnect TayyebiSwims from your Google account at any time in your Google account settings. 7. WHAT WE DO NOT DO • We do not sell your information, or your swimmer's, to anyone. • We do not sell or share sensitive information, including information about a child and information about health or disability. • We do not run advertising on this site, and we do not let anyone track you across other websites from it. • We do not use your swimmer's medical information for anything other than delivering lessons safely. 8. COOKIES AND DO NOT TRACK We set one cookie of our own: the one that keeps you signed in. It is required for the site to work, and it is cleared when you sign out. On the pages where you enter or update a card, Stripe's payment form also sets its own cookies. Stripe uses them to detect fraud, which is the reason your card is safe to type into that form. They are set by Stripe, not by us, and we cannot read them. We do not use advertising cookies or analytics cookies, we do not run advertising on this site, and we do not use any service that profiles you. We do not respond to Do Not Track browser signals. No third party collects personally identifiable information about your activity across different websites through this site. 9. HOW LONG WE KEEP IT We keep your account information while you are enrolled, and afterwards for as long as we may need it: to answer a question about a past charge, to meet tax and accounting obligations, and to show which policies you agreed to and when. Signed policy records and billing records are kept longest, because those are the ones a dispute turns on. Ask us to delete something and we will tell you what we can remove, what we have to keep, and why. 10. HOW WE PROTECT IT Passwords are stored only as salted hashes, never as text anyone can read. Card numbers never touch our systems. Sign-in sessions and password reset links are stored as hashes too, expire on their own, and are cleared when you change your password. Access to family and swimmer information is limited to the owner and to staff whose work requires it, and an instructor sees only the families they teach. No system is perfectly secure. If information about you is ever exposed, we will tell you, and we will do it within the time the law allows. 11. SEEING AND CHANGING YOUR INFORMATION You can review and update your contact details, your address, your emergency contacts and your swimmer's information from your account in the parent portal. If something is wrong and you cannot fix it yourself, contact us using section 14 and we will correct it. 12. YOUR CHOICES • Email about lessons, schedule changes and payments is part of the service, and does not stop while you are enrolled. • Promotional email is separate. Every promotional message has an unsubscribe link, and unsubscribing does not affect your lessons. • You can disconnect Google Sign-In and use a password instead. • You can reset your calendar link. 13. CHILDREN This site is meant for parents and guardians, not for children. It is not directed to children, we do not knowingly let anyone under 13 create an account, and we do not collect information from children. Information about a child reaches us only from that child's parent or guardian. If you believe a child has created an account or sent us information directly, contact us and we will remove it. 14. CONTACT US Questions about this policy, or about what we hold about your family: TayyebiSwims LLC 20 South 18th Street New Hyde Park, New York 11040 tayyebiswims@gmail.com (516) 387-4553 15. CHANGES TO THIS POLICY If we change this policy we will post the new version here and update the effective date at the top. If a change materially affects how we handle information about you or your swimmer, we will email you before it takes effect. The version posted on this page is always the one in force.